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Abstract 

In this paper, a construction of a pair of quasi-cyclic LDPC codes to construct a quantum error-correcting code 
is proposed. Our construction method is based on algebraic combinatorics and have lots of variations for length, 
code rate. Our main contribution for quantum error-correcting codes theory is the discovery of quantum regular 
LDPC codes. Not only exsistance but also constructoin are shown in this paper. 

This paper has been published in Proc. of IEEE Intl. Symp. Inform. Theory, 2007. 

I. Introduction 

This paper presents a construction of a pair of quasi-cyclic low-density parity-check codes as ingredients 
of a CSS code. A class of CSS codes is one of the most famous quantum error-correcting codes. Since 
CSS codes find their applications not only for quantum error-correction but also for privacy amplification 
of quantum cryptography, they have become important research objects for quantum information theory 
[11]. 

A CSS code is constructed by a pair of linear codes. The pair of linear codes are required to have 
twisted relation, that is, one of the codes includes the dual code of another one. (In this paper, we denote 
the condition for a pair of codes to be twisted by (T).) Since the twisted relation is not required in 
classical coding theory, the ways of constructing such codes have not yet been sufficiently investigated. 
In this paper, a pair of linear codes is realized to be quasi-cyclic LDPC. Quasi-cyclic LDPC codes are a 
practical class of classical error-correcting codes due to its compact representation and good performance, 
especially for short code lengths [12], [2]. 

There are related works aiming at constructing CSS codes, i.e. to realize a pair of linear codes with 
twisted relation. If we roughly classify them into two classes, one is based on algebraic-geometry codes 
(e.g. [7]) and the other is based on LDPC codes. Our research is the later one. In the previous related 
works, one of them is computational approach which uses to design a parity-check matrix of a LDPC 
code via Finding Low-Weight Codeword problem [3]. One of them is theoretical approach which uses 
symmetric parity-check structure [6] . It should be mentioned that Camara investigated to construct LDPC 
"stabilizer" codes, which are another class of quantum codes, by Cayley graph method [1]. Our method 
of designing a parity-check matrix of a LDPC code is theoretical and deterministic. Furthermore, one of 
advantages of our method is a guarantee to obtain a good property for a parameter "girth", which affects 
performance of an LDPC code. (In this paper, explicit statement of this property is denoted by (G).) 

This paper is organized as follows. In §11, we introduce notations, definitions and state our main results. 
To prove our main results in §IV, we prepare key lemmas in §111. In §V, we report simulation results of 
error correcting performance for some of our codes. At last, in §VI, variations of our code and the future 
directions of our research will be discussed. 



II. Notation, Preliminaries, and Main Results 

CSS (Calderbank-Shor-Steane) codes are quantum codes constructed by a pair of classical linear codes 
C, D. In this paper, we assume that our linear codes are binary. The following condition (T), called twisted 
relation, is required for the two codes to construct a CSS code: 
(T) D L C C, 

where D ± is the dual code of D. Definition of a dual code D 1 - of a given code D is the following: 

D ± :={d'\dx T (d') = 0,WeD}, 

where T (d') is the transposed vector of d'. Note that D ± is equal to the linear code generated by a parity- 
check matrix of D. A function (, }, defined by (x,y) := x x T y, gives an inner product over the binary 
field. The dual code D L is regarded as an orthogonal space of D via (, ). 

The construction of a "quantum" CSS code by such a pair of "classical" codes C, D is not mentioned 
in this paper. Our paper focuses on constructing such a pair C, D which are quasi-cyclic LDPC. Please 
see [9] for the relation of them: 

Remark 2.1: In general, a pair of linear codes forming a CSS code is denoted by C\, Qf. For the ease 
of notation, we use C (D) instead of C\ (C^ 1 ), respectively. 

If a parity check matrix H c of C has the following form 
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then C is said to be a quasi-cyclic (QC) LDPC code, where is an integer, 1(1) is a circulant 
permutation matrix, i.e. 
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and 1(b) = I(l) b . Let us denote a matrix which consists of the indices of H c , by V, C - In other words, 

Uc = 



Co,0 c 0,l 
Cl,0 Cii 
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We call H c an index matrix of H c . A QC-LDPC code is said to be a (J, L, P)-QC LDPC code if its 
index matrix has J-rows and L-columns and the degree of the related circulant matrix 1(1) is P. 

Quasi-cyclic LDPC codes are one of important classes of the classical error-correcting codes. For 
example, as we have shown, they have a compact representation of a parity check matrix via the index 
matrix. With sum-product decoding, it is expected that quasi-cyclic LDPC codes has good performance, 
especially for short code length. 

Remark 2.2: In some studies of quasi-cyclic LDPC codes, I(b i:l ) stands for a zero-matrix if b i:l < 
0. However, in the discussion for main results in this paper, b^i is regarded as an element of 7h P = 
{0, 1, . . . , P — 1}. Therefore, 1(b) is not a zero-matrix. 

The notion of girth, which has been mentioned in the introduction, is one of the properties of the 
Tanner graph associated with a given parity-check matrix. (Please see [5] for details.) It is known that 
there are many parity-check matrices for a given linear code. A parity-check matrix is one of inputs of the 
decoding algorithm of LDPC codes. The outputs of the decoding algorithm for the same received word 



will be different if we change, one of inputs, parity-check matrix. For a parity-matrix H, let us define 
another parity-check matrix H' by adding one row, which is the same as the first row, to the last row 
of parity-check matrix. It implies that there are the same row in the new parity-check matrix at the first 
row and the last row. Interestingly, the error-correcting performance by using H' will be extremely worse 
than the one by using H. The sum-product decoding does not work well if there are four "1" such that 
h x , y = h XjV > = h x > >y = h x ' >y > = 1 for any quadruple x < x',y < y'. In the terminology of graph theory, 
it implies that the girth of the Tannar graph of H' is 4. It is known that we could not expect the good 
error-correcting performance if the girth of the Tanner graph of the parity-check matrix is 4. In order to 
construct a code with good error-correcting performance, we should avoid having the girth to be 4. For 
the ease, we denote the following condition by (G). 

(G) The girth of Tanner graph of a parity-check matrix is greater than or equal to 6. 

Remark 2.3: If C = D and C L C C, the CSS code obtained by C is called self-dual containing ([4], 
[6]). It is known that there are no self-dual containg codes which satisfy (G). Therefore we would like to 
investigate a pair of non-self-dual containing codes. 

Our main results are the following: 

Theorem 2.4: Let C, D be QC LDPC codes. 

(i) For any odd L > 0, there is no pair C, D such that both matrices satisfy (G), (T) simultaneously. 

(ii) For any even L > and any 1 < J, K < L/2, there exists P such that C is a (J, L, P)-QC LDPC 
code and D is a (K, L, P)-QC LDPC code and C, D satisfy both (G) and (T). 

Theorem 12.41 (ii) is obtained, as a corollary of the following result. 

Theorem 2.5: Let P be an integer which is greater than 2. Let cr, r are elements of Zp := {z\z~ x exists} 
such that ord(cr) ^ W^p an d 1 — e Z* p for any 1 < j << ord(cr) and r ^ 1, a, a 2 , . . . , where 
ord(a) := min{m > 0|<T m = 1} and #X means the cardinality of a set X. If we put 

a-i +l < I < L/2 
-T(ji- 1+l L/2 < I < L 

ra -k-i+i o < / < L/2 
-a k+l L/2 < I < L 

and put 

= \Pj,W<j<J,G<l<Li H-D = [dk,l]o<k<K,0<l<L, 

where L/2 = ord(cr) and 1 < J, K < L/2, then C, D satisfy (G) and (T). 

Example 2.6: Let P = 7, (Zp = {1,2,3,4,5,6}) and choose a = 2,r = 3. Then L/2 = ord(2) = 3 
and we put J = K = L/2(= 3). 

By Theorem 12.51 

/ 1 2 4 2 4 1 \ 
Ho = 4 1 2 4 1 2 , 
\ 2 4 1 1 2 4 j 

/536653\ 
U D =653536 

\365365/ 

provide us with C and D which are QC-LDPC codes and which satisfy (G) and (T). 
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III. Quasi-Cyclic LDPC codes with (T) 

In this section, we give some necessary and sufficient conditions for QC-LDPC codes C, D to satisfy 
(T). 

Let us denote rows of index matrices C, V by Cj, dk, respectively, in other words, 

C j := ( C 3,0, c j,h ■ ■ ■ j c j,L-l), 

dk '■= (<4,o> dk,ii ■ ■ ■ i dk,L-\j- 

In Example ES c = (1, 2,4,2,4, 1), di = (6,5,3,5,3,6). 

For an integer sequence x = (x , X\, . . . , xl-i), we call x multiplicity even if each entry appears even 
times. For example, (0, 1, 1, 0, 3, 3, 3, 3) is multiplicity even. And (0, 2, 2, 4, 4, 4, 0) is not multiplicity even, 
since "4" appears odd times. 

Proposition 3.1: Let C be a (J, L, P)-QC LDPC code and D a (K,L,P)-QC LDPC code. The codes 
C and D satisfy (T) if and only if Cj — dk is multiplicity even for any < j < J, < k < K. 

It is easy to verify that the parameters from Example 12.61 satisfy Proposition 13.11 In fact, c — d\ = 
(1 - 6, 2 - 5, 4 - 3, 2 - 5, 4 - 3, 1 - 6) = (2, 4, 1, 4, 1, 2) is multiplicity even. 

To prove Proposition 13 . 1 1 we prepare some lemmas. 

Lemma 3.2: Let C and D be linear codes. (T) holds on C and D if and only if any row of He is 
orthogonal to any row of Hd- 

We divide H c into the following J row -blocks: 

H Cj := (I(cj, ), I(c i( i), I(c jt l-i)), < j < J. 

In a similar way, we divide H D into K row-blocks. 

Before moving to Lemma l33l we make the following observation: It is easy to verity that any row of 
H c and any row of H D are orthogonal if and only if any row of Hcj and any row of H Dk are orthogonal 
for any < j < J, < k < K. 

Lemma 3.3: For < j < J, < k < K, any row of H C j and any row of H Dk are orthogonal if and 
only if Cj — dk is multiplicity even. 

Proof: In this proof, for the ease, denote a-th row of Hcj by C a and denote 6-th row of Hok by 
V b . Put a binary matrix X := (x a ,6)o<a,6<p, where 

X a ,b ■= (C a , T> b ) =C a X T V b . 

Then for < j < J, < k < K, X = if and only if any row of H C j and any row of H Dk are 
orthogonal. 

By the definition of X, X = H C j x T (H Dk ). And by T I{b) = I(-b), we have H C j x T (H Dk ) = 
Since /() is a binary circulant permutation matrix, X = if and only if Cj — dk is multiplicity even. ■ 

IV. Proofs of Main Results 
To prove Theorem 12.41 12.51 ??, we quote the following facts: 

Fact 4.1 ([2]): A necessary and sufficient condition to have girth > 6 in the Tanner graph representation 
of the parity-check matrix of a (J, L)-QC LDPC code is c Jli / 1 — Cj lt i 2 + Ck 1: i 2 — c^,^ ^ for any 
< j'i < j 2 < J, < h < l 2 < L. 

It is obvious that the above Fact 14.11 is equivalent to the Proposition 14.21 below. A term "multiplicity 
free" means that there is no pair of the same entries in a given vector. For example, (0, 1, 2, 3, 4, 5, 6, 7) 
is multiplicity free, however, (0, 0, 1, 2, 3, 4, 5) is not. 

Proposition 4.2: A necessary and sufficient condition of a QC-LDPC code C to have girth > 6 is 
c h ~ c h to b e multiplicity free for any < j% < j 2 < J. 



A. Proof of Theorem?? 

Proof: Assume that C and D are a pair of linear codes which are the ingredients of a self-dual 
containing CSS code. It implies D = C . By Proposition 13.11 Cj — Cj/ must be multiplicity even for any 
< j, f < J- It follows that the difference cannot by multiplicity free. On the other hand, c, — Cf must 
be multiplicity free if (G) holds by Proposition 14.21 Therefore (G) and (T) cannot hold simultaneously. ■ 

B. Proof of Theore M2.5\ 

We quote some fundamental group-theoretical facts. 

Fact 4.3 ([8]): For any P > 2, Zp := {z £ 7Lp\z~ x exists} is an abelian (i.e. commutative) group with 
multiple operation of Zp. 

Fact 4.4 ([8]): Let G be a group and H a subgroup of G. Put [g] := {hg\h E H} for g E G. 
Then we have 

[g] n [g'} ? fo] = [</] <=► e H «=► g'/g e H. 
Proof: [of Theorem 12.511 First we prove that (G) holds on C. To prove (G), we use Proposition 14.21 

Fix any < a < b < J. Denote the first L entries of c a — c b by X, and the remaining L entries by Y. 
Then we have X = (a- a - a- b ) x (1, a~\ a' 2 , a~ L+1 ), Y = (-a a - 1 + o^t x (1, a, a 2 ,..., a L - 1 ) 

To be multiplicity free for c a — c&, it is necessary and sufficient that there is no pair of the same 
elements in X,Y. In fact, there is no such a pair in X, and the same holds for Y. Put G := Zp and 
H := {1, a, a 2 , . . . , a L_1 }. By using the same notation as in Fact 14.41 we obtain that the elements of X 
are [a- a - a- b ] and the elements of Y are [(-a a_1 + o" 6 " 1 )^. By (>- a - a- h )/((-a a - 1 + a 6 " 1 )^ = 
a- a - b+1 /r <£ H, it follows that X n F = 0. 

By a similar argument, we may show that (G) holds on D. 

At last, we show that (T) holds on the pair (C, D) by using Proposition 13.11 Choose any < j < J, < 
k < K and denote the first L entries of c, — c4 by Z and the remaining by W. 

The elements of Z are [a^i — rcr _fc_1 ] and the elements of W are [— ra^ 1 + a k ]. Since (cr - - 7 — 
rcr _fe_1 )/(— ra^ 1 + cr fc ) = a~^~ k E H, the elements of Z are equal to the elements of W. Thus Cj — dk 
is multiplicity even. ■ 

C. Proof of Theorem \2.4\ 

We quote the following fundamental facts from group theory and number theory: 

Fact 4.5 ([8]): If P is a prime, then Zp is a cyclic group. In other words, there exists z E Zp such 
that Zp = {l,z,;z 2 ,...z p - 2 }. 

Fact 4.6 (Dirichlet's Theorem [10]): For a series A n := b + an, primes appear infinitely in Ai, A 2 , . . . 
if the greatest common divisor of a, b is equal to 1. 

Proof: (i) Let L be an odd integer and C, D QC-LDPC codes. To satisfy (T) for C, D, it is necessary 
to be multiplicity even for Cj — dk by Proposition 13.11 It is impossible since L is odd. 

(ii) Let L be an even integer and J, K integers with 1 < J, K < L/2. 

In case L = 2, put P = 3, a = 1, and r = 2. Then Theorem 12.51 provides us with a pair of linear codes 
which satisfy (G) and (T). 

From here on, we assume L > 4. If there exist a prime P = 1 + (L/2)n,x > 2, Theorem 12.41 holds. 
Since Zp is a cyclic group of order (L/2)n (Fact 14.51) . there is a generator z. Put a := z n , then we have 
ord(a) = L/2 and we may choose r. By Theorem 12.51 it follows that Theorem 12.41 holds. On the other 
hand, by Dirichlet's theorem (Fact 14.61 ), such a prime P exists. ■ 



V. Simulation Results of Error-Correcting Performance and Minimum Distance of 

Our Codes 

A. Simulation Results 

We performed simulations for obtaining error-correcting performance of our codes with sum-product 
decoding, which is generally used as decoding method for LDPC codes, and with some parameters 
(J, L, P, cr, r), where the symbols J, L, P, a, r are defined in the statement of Theorem 12.51 We assumed 
that the channel is binary symmetric. 




Fig. 1. Simulation Results: Block Error Rate (BLER) and Cross Over Probability of BSC 

Figure [T] shows simulation results for our codes C. The list of the parameters (J, L, P, cr, r) are written 
south-east side of the figure. The code lengths are obtained by L x P. The vertical values show the block 
error-rate of the error-correcting performance. The block error-rate is the following: 

the num. of "error-correction fails" 
the total num. of simulations 

The reasons why our simulation results shows the block-error rate of C/D 1 - over the bit-flipping binary 
symmetric channel is the followings: 

• The code D/C 1 - is isomorphic to C/D 1 - up to the bit-positions. Thus the simulation results of the 
block-error rate of D / C ± over the phase-error symmetric channel is the same of the block-error rate 

of C/D ± . 

• If we assume that the bit-flip error and the phase error occur independently, the fidelity of the quantum 
communication over the noisy channel e by the quantum CSS code is equal to ts + tp — £b£p, where 
es,ep are the block-error rate of C/D 1 -, D/C 1 - over given cross over probabilities respectively. 

B. Minimum Distance 

If J < L/2 or K < L/2, the minimum distance of our classical codes C / D 1 -, D /C ± and the related 
quantum codes is very small. In fact, the minimum distance cannot exceed L, since we know a codeword 
with the weight L in the parity-check matrix H c or H D . Imagine the block error-rate of the related 
quantum code over the bit-flipping cross over rate 0.03 and the phase cross over rate 0.03. If we assume 
the both error occurs independently, it is expected that about 6% qubits are changed by both or one of 
the errors. It is known that only half of the minimum distance of the code is correctable by the minimum 
distance decoding. Remember that the length of our code with ID (4, 10,61,9,49) is 610, the expected 
number of error is 0.06 x 610 ~ 36, and the minimum distance is at most 10. The minimum distance should 



be larger than 72. However, it is needless to have so anxiety. Because our decoding is not the minimum 
distance decoding but the sum-product decoding. See the block error-rate of the code ID (4, 10, 61, 9, 49) 
in Figured! Over the cross over probability 0.03 of the channel, its block error-rate of C /D L is less than 
0.0048. Hence the block error-rate of the quantum CSS code is less thatn 0.01. Thus it is expected that 
the block error of the related quantum code occurs only 1 time per 100 times communications over the 
bit-flipping cross over rate 0.03 and the phase cross over rate 0.03. 

VI. Variations and Future Subiects 

A. Variation of the Length 

We observe the length of our code obtained by Theorem 12.51 

In general, parameters J, K should be greater than or equal to 3. If they are smaller than 3, then 
sum-product decoding does not work well. Thus L/2 is expected to be greater than or equal to 3, since 
J,K<L/2. 

Figure [2] is a histogram of "length < 10000 and the cardinality of the triples (P, a, r)" with P < 200 
and L > 3. As we see on Figure [21 various lengths are realizable by our code. For example, there exist 
35514 triples (P,a,r) which provide us with codes whose lengths are more than 500 or less than 1001. 
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Fig. 2. Histogram of Lengths and Numbers of triples 



B. Code Space and Code Rate 

The code rate of a CSS code is the following: 

dimC — dim D ± . 

By our proposal, we can construct a (J, L, P)-QC LDPC code C and a (K, L, P)-QC LDPC code D for 
any L, 1 < J, K < L/2. The code rates of C,D are dimC ~ 1 - (JP - J + I) /LP and dim/^ ~ 
(KP — K + I) /LP, respectively. This implies that the code rate, achieved by our proposal, is 

1 — (JP + KP — J — K + 2)/ LP ~ 1 - ( J + K)/L. 

Therefore we can see that almost any code rate can be provided by our proposal. 

We have constructed parity-check matrices H c , H D . It is easy to verify that if we choose J and K to 
be less than L/2, then the parity-check matrices are submatrices of parity-check matrix, constructed from 
parameters J = K = L/2. In fact, this phenomenon can be generalized to the following proposition: if 
we construct parity-check matrices H' c , H' D by deleting rows from given parity-check matrices H c , H D 
whose associated codes satisfy (G)(T), then the code constructed from H' c , H' D also satisfy (G)(T). 

Let C, D' be code spaces associated to submatrices of parity-check matrices H c , H D , respectively. 
Since C C C and D' 1 C -D -1 , it follows that (T) holds. On the other hand, codes with parity-check 
matrices Hc,Hr> satisfy (G). Hence subcodes with parity-check matrices He, Hp* also satisfy (G). 



By deleting rows, we could arrange the code space and the code rate very finely. Another advantage 
of deleting is that it is possible to remove small loops of Tanner graph. We may expect to improve 
error-correcting performance. To find good deleting algorithm is the subject of our future research. 

C. Indices Cjj, dj-,i 

It is interesting to characterize indices Cjj, d^i which provide us with codes satisfying (T) and (G) 
both. We can obtain ones of different examples from our proposal by simultaneously replacing c^y, dk,i 
to c 3 y — z, dk,i — z (0 < I < L/2) for all z G Zp. Similarly, we can simultaneously replace them to 
Cjj — z,dk,i — z (L/2 < V/ < L). Furthermore, we can replace them to zcj^zd^i (0 < I < L) for any 

z e zp. 

D. With a Zero Matrix 

As we mentioned in Remark I2.2[ a zero-matrix is used as a block of a parity-check matrix. Our 
propositions 13.11 and 14.21 can be applied to such the case by generalizing the definitions of multiplicity 
free and multiplicity even as follows: 

Let us denote the index c a f) or d ajb by oo if (a, b) block of a parity-check matrix is a zero-matrix, 
generalizing the difference — by defining 

z — 00 = 00,00 — 2 = 00, 00 — 00 = 00. 

We call a vector "multiplicity free" if there is no duplication in its entries except for symbol 00. We call 
a vector "multiplicity even" if each entry of the vector appears even number of times except for symbol 
00. 

By the generalization above, Propositions 13.11 and 14.21 work well. Thus, we can easily verify that given 
QC-LDPC codes, with zero-matrices satisfy (G) and (T). However, we did not find a good construction 
method, like our main theorem 12.51 It is also a future research subject. 

E. Permuted Index Matrices 

By permuting index matrices, it is possible to converte Theorem ?? in the followin manner: 
Theorem 6.1: Let P be an integer > 2 Let a, r are elements of Zp := {^z^ 1 exists} such that 

ord(a) 7^ #Zp and 1 — a j G Zp for any 1 < j << ord(a) and r ^ I, a, a 2 , ... , where ord(cr) : = 

min{m > 0\a m = 1} and #X means the cardinality of a set X. Put 

/ o-i +l < / < L/2 
Cj ' 1 : ~ \ T(T-'J +l L/2 < I < L, 

j -rcr**- 1 < I < L/2 
dk ' 1 { -a k ~ l L/2 < I < L 

and put Uc = [cj,i}o<j<j,o<i<L, W-d = [dk,i]o<k<K,o<i<L, where 1 < J, K < L/2. Then C and D satisfy 
(G) and the twisted condition. 

Example 6.2: Let P = 7, (Zp = {1,2, 3, 4, 5, 6}) and choose a = 2 and r = 3. Then L/2 = ord(2) = 3 
and we put J = K = L/2 (=3). Then the parity-check matrices are obtained from Theorem ?? as: 

/124365\ /421635\ 
U c =\ 4 1 2 5 3 6 ,^ D = 1 4 2 5 6 3 . 
\241653/ \214356/ 
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